Sign in
instance

Mint a connection principal and its one credential.

Changed on

Principal and credential are ONE UNIT with a stable immutable id, and there is one credential per principal EVER — rotation is a new mint plus a revoke of the predecessor, never a second credential on this one.

The value is returned EXACTLY ONCE, here. It is not retrievable afterwards through any surface.

The label names the intended peer for the audit trail. It is descriptive and NOT enforced: this instance cannot verify who holds the token, and does not pretend to.

post/api/v1/instance/connections

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/instance/connections
  • Auth: HTTP bearer

Request body

labelstring required
lifetime_secondsinteger

Clamped to the instance ceiling, and the response says so. Omit for the default; naming both this and indefinite is a refusal, never a precedence rule.

indefiniteboolean

Requires the instance to allow indefinite credentials.

Response

The connection, with its value disclosed once.

valuestring required

THE ONLY DISCLOSURE. Not retrievable afterwards through any surface.

clampedboolean required

The instance ceiling shortened the requested lifetime.

Changes

  • f24ca8785e72Revision changes
    • warning

      the request property's max was set to 315360000.00

  • 54b2780eec85Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status